feb 2018 housing authority webinar - ultimate it …...office and visa versa. • you can’t fight...
TRANSCRIPT
Feb 2018 Housing Authority Webinar
Why Are We Here Today?
Why Are We Here Today?
Agenda
1. Recap
2. Vulnerability VS Exploit
3. Spectre and Meltdown
4. The Big Threats
5. Everywhere Protection
6. Questions
Recap
We want to serve you better
We want to do a better job you taking care of you and
your housing authority.
We want to serve you better through better
communication and better service
We will also be discussing a little about who we are
and setting the stage for future security discussions
We Want To Serve You Better!
• Better Communication• Who is Ultimate IT Guys
• Monthly Webinar
• Email Alerts & Updates
• Conferences
• Better Service• New Way to Request Help
• Improvements to Basic Service
• New Add-On Services
Better Communication
Monthly Webinar
• Helpful quick tips
• Standards
• Security updates
• Timely topics
• New services
• Training
January Recap
January Recap
• What we have always done does not work anymore!
• Data Breaches are common and chances are you
have been exposed.
• Our work & personal lives are interconnected.
• The things we do away from the office effect the
office and visa versa.
• You can’t fight today’s threats using 1990’s
technology.
• Traditional Anti-Virus is not going to stop the
threats we have today
Vulnerability vs Exploit
• Vulnerability
• Exploit
• Attack
Vulnerability vs Exploit
Vulnerability - is a flaw in a
piece of hardware or software
Vulnerability vs Exploit
Vulnerability - is a flaw in a piece of hardware
or software
Exploit - An exploit is a way to
take advantage of a vulnerability
Vulnerability vs Exploit
Vulnerability - is a flaw in a piece of hardware
or software
Exploit - An exploit is a way to take advantage
of a vulnerability
Attack - An attack is when
someone uses an exploit to gain
access to a system or information.
Vulnerability Analogy
Vulnerability Analogy
A Vulnerability is like not having a
lock on your back door.
Exploit Analogy
An Exploit is like somebody going
down the street checking to see if
someone’s backdoor is unlocked.
Attack Analogy
An Attack is like somebody
actually opening the door and
going in.
Analogy Recap
Vulnerability is the what
Exploit is the how
Attack is the action
Use What We Learned
Use What We Learned
Spectre and Meltdown are
vulnerabilities
Use What We Learned
At the time of announcement in
January there were no know
exploits or attacks on these
vulnerabilities.
Use What We Learned
Now
According to AVTest there are
over 150 code samples that they
have collected that appear to
exploit these vulnerabilities.
Use What We Learned
According to AVTest there are over 150 code
samples that they have collected that appear
to exploit these vulnerabilities.
Still no known or reported
attacks.
What do I need to do?
No immediate danger, but the
exploits and attacks are coming.
What Needs to Happen?
3 Things to avoid the Spectre
and Meltdown issues:
• Windows updates
• Bios Updates
• Anti-Virus Updates
The Facts
• No current Exploits
• No current Attacks
• The Exploits & Attacks are Coming
• We have patched everything that can
be and are continuing to watch of
more patches
The Facts
• Pretty much everything with a
processor is vulnerable.
• All computers, both Windows & Apple
have this issue.
• Many older computers will never
have a Bios Update.
• Buying a new computer doesn’t fix the
problem.
Services Review
What is our Basic Service!
• Preventative Maintenance
• Anti-Virus
• Off-Site Backup
• Remote Support
• Business Email Service
• Remote Access
Better Service
What is our Basic Service!
• Preventative Maintenance
• Anti-Virus
• Off-Site Backup
• Remote Support
• Business Email Service
• Remote Access
Better Service
New & Additional Services!
Security
Assessments
HIPAA & PCI
Compliance Assessments
& Reporting
Office 365Exchange
Encrypted
Enhanced
Network
Enhanced
Backup
Enhanced
Security
Basic Maintenance
Security Update
What we have always done
does not work anymore!
Security Update
Our work & personal lives
are interconnected.
Security Update
The things we do away from
the office effect the office
and visa versa.
Security Update
You can’t fight today’s
threats using 1990’s
technology
You can’t fight today’s threats using
1990’s technology
Traditional Anti-Virus is
not going to stop the threats
we have today!
Big Threats
• Mobile Devices
• Working at Home
• Public Wifi
• Free Email
• DNS Directory Hijacking
• Data Breaches
• Identity Theft
• Ransomware
Security Summary
What are we going to do
about these issues?
Problems We Are Trying To Solve
• Ransomware
• Data Breaches – Direct & Indirect
• DNS Security
• Enhanced Network Security
• Identity Management & Protection
• Password Management
• Public Wifi
• Mobile & Home Devices
New Partnerships
• ASCII
• MSP Alliance
• ID Agent
• Cyren
• SentinelOne
• Carvir Security
• Pass Portal
• Dashlane
• JumpCloud
• Fortinet
Everywhere Protection
Everywhere Protection
Everywhere Protection
New Enhanced Security
Everywhere protection
Protects your:
• Work computer
• Laptop
• Cell Phone
• Home Computer
• Tablet
Up to 5 devices per user for $10/mo
New Enhanced Network Security
Network Protection
Protects everything on your network
from:
DNS Hijacking
Bad Websites Filtering
Phishing Websites Filtering
Entire network for $25/mo
Security Summary
What are we going to do going
forward
• Ransomware
• Darkweb
• Identity Management
Questions?